217.181.82.29

WordPress HTTP Brute Force Login Attempt.

This IP was detected by CrowdSec triggering crowdsecurity/http-open-proxy

(confirmed_bot_sig) Confirmed bot

217.181.82.29 - - [04/Jun/2026:01:21:51 +0200] "GET /wp-login.php HTTP/1.1" 404 27 "http://alliance.fm/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:138.0) Gecko/20100101 Firefox/138.0" ...

Web attack blocked by Wordfence on www.museumvalkenburg.nl (1 hit). Reported by CRMON.

block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8

(mod_security) mod_security (id:210350) triggered by 217.181.82.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 14 10:47:41.123486 2026] [security2:error] [pid 30631:tid 30631] [client 217.181.82.29:15358] M ... show more (mod_security) mod_security (id:210350) triggered by 217.181.82.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 14 10:47:41.123486 2026] [security2:error] [pid 30631:tid 30631] [client 217.181.82.29:15358] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.schlegelcreative.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.schlegelcreative.com"] [uri "/wp-login.php"] [unique_id "abV1DSG3E-MwAuExa8O8XAAAAA0"], referer: https://schlegelcreative.com/wp-login.php show less

(mod_security) mod_security (id:210350) triggered by 217.181.82.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 06 15:36:48.027284 2026] [security2:error] [pid 20915:tid 20915] [client 217.181.82.29:23166] M ... show more (mod_security) mod_security (id:210350) triggered by 217.181.82.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 06 15:36:48.027284 2026] [security2:error] [pid 20915:tid 20915] [client 217.181.82.29:23166] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||primacomm.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "primacomm.com"] [uri "/wp-login.php"] [unique_id "aas64I_Z3mf7Jr-McfEKUAAAABU"], referer: https://primacomm.com/wp-login.php show less

(mod_security) mod_security (id:210350) triggered by 217.181.82.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 04 21:49:26.404447 2026] [security2:error] [pid 24088:tid 24088] [client 217.181.82.29:54824] M ... show more (mod_security) mod_security (id:210350) triggered by 217.181.82.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 04 21:49:26.404447 2026] [security2:error] [pid 24088:tid 24088] [client 217.181.82.29:54824] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||seagrovesrealty.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "seagrovesrealty.com"] [uri "/wp-login.php"] [unique_id "aajvNg2p233jYWKAVUG7-QAAAAk"], referer: https://seagrovesrealty.com/wp-login.php show less